CERT24GitLab Patches Critical AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
A critical flaw in GitLab's AI Gateway could, under certain conditions, allow a logged-in user with Duo Agent Platform access to run commands on the gateway. The issue affects organizations that host their own AI Gateway. GitLab rated it critical with a CVSS score of 9.9 out of 10.